120 matches found
SUSE CVE-2022-3854
A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service...
openSUSE: Security Advisory for poppler (openSUSE-SU-2021:3854-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE: Security Advisory (SUSE-SU-2021:3854-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-3854
CVE-2020-3854 affects macOS Catalina 10.15.x; the issue is described as a memory corruption vulnerability that could allow an application to execute arbitrary code with system privileges. Apple notes a fix in macOS Catalina 10.15.3 (Security Update 2020-001 Mojave/High Sierra also referenced in A...
CVE-2019-3854
CVE-2019-3854 entry is rejected/not used; not a security issue as per description.
Ubuntu 18.04 LTS : WebKitGTK+ vulnerabilities (USN-3854-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3854-1 advisory. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote...
Ubuntu: Security Advisory (USN-3854-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for ntp CESA-2018:3854 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Virtuozzo Linux Errata and Security Advisory 2018:3854 Low
Upstream security update. Follow RHSA-2018:3854 for details...
CVE-2018-3854
CVE-2018-3854 affects Quicken Deluxe 2018 for Mac (v5.2.2). Root cause: a crafted sqlite3 request can remove the password protection by altering the Quicken data file (e.g., deleting a ZDOCUMENTPROPERTY row), leading to information disclosure and data modification without the password. Exploitati...
Debian DSA-3854-1 : bind9 - security update
Several vulnerabilities were discovered in BIND, a DNS server implementation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2017-3136 Oleg Gorokhov of Yandex discovered that BIND does not properly handle certain queries when using DNS64 with the...
Debian: Security Advisory (DSA-3854-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-3854
The CVE-2017-3854 entry addresses a Cisco WLC mesh-impersonation vulnerability. Affected products run Cisco Wireless LAN Controller software in meshed mode (e.g., 8500/5500/2500 series, Flex 7500, vWLC, WiSM2). Root cause: insufficient authentication of the parent AP in a mesh configuration, enab...
CVE-2015-3854
packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICEPOWER permission requirement via a broadcast intent with the PNW.stopSaver action, aka internal bug 20918350...
CVE-2015-3854
CVE-2015-3854 affects Android 5.x; the vulnerability exists in PowerNotificationWarnings.java within the Android SystemUI power package. A broadcast intent using the PNW.stopSaver action can bypass the DEVICE_POWER permission requirement, enabling local access to perform restricted actions. The i...
CVE-2016-3854
drivers/media/video/msm/msmmctlbuf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which allows attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted application, aka Qualcomm internal...
CVE-2016-3854
CVE-2016-3854 affects the Qualcomm MSMM driver path in Android: the file drivers/media/video/msm/msm_mctl_buf.c does not validate the image mode, enabling a crafted application to trigger a denial of service via out-of-bounds access, with potential unspecified additional impact. Reported as Qualc...
CVE-2014-3854
CVE-2014-3854 affects Pyplate 0.08, specifically the admin/addScript.py CSRF flaw that can allow an attacker to hijack administrator sessions and trigger XSS via the title parameter. The NVD lists a CVSS v2 base score of 6.8 (medium). Exploitation is evidenced by an exploitDB entry linked via CIR...
